Job description
Requirements
Must have:
- Bachelors degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a closely related discipline. - At least 5 years of relevant professional experience, including 2+ years in cybersecurity, information security, software security, IT, engineering, or a similar field. - Solid working knowledge of cybersecurity frameworks and standards such as NIST, ISO 27001, IEC 62304, and Purdue Enterprise Reference Architecture (PERA). - Understanding of product safety risk and how it connects to product cybersecurity risk. - Familiarity with secure software development lifecycle (SSDLC), vulnerability management, threat modeling, and cybersecurity best practices. - Strong ability to prioritize multiple demands with excellent organization and time-management skills. - Proven critical thinking, analytical judgment, and problem-solving ability in a fast-changing environment. - Ability to collaborate effectively within a team and adapt to evolving business and technology needs. - Excellent documentation, communication, and interpersonal skills. - Preferred: one or more industry-recognized cybersecurity certifications such as CISSP, CISM, CEH, Security+, GSEC, or equivalent. - Preferred: experience or exposure to product security, medical device security, cloud security, or secure software development.
Responsibilities:
- We develop and implement cybersecurity deliverables for product software releases and respond to technical security questions from customers. - We help protect manufacturing assets through security controls, vulnerability assessments, risk reviews, and mitigation efforts. - We assess the cybersecurity posture of third-party vendors and suppliers that provide product components or services. - We provide project updates, review policies, track compliance work, coordinate cybersecurity initiatives, and support internal and external audits. - We partner with development operations and product teams to design and deploy monitoring and security solutions for stand-alone and embedded software and supporting applications. - We perform detailed software assessments to identify security weaknesses and potential threats. - We support the protection of applications and computing assets across public, private, and hybrid cloud environments. - We safeguard applications in alignment with global privacy, security, business resiliency, and compliance frameworks. - We assist with security system administration, configuration reviews, and implementation of risk-reduction solutions. - We take part in incident, breach, and response activities for products and supporting applications. - We contribute to the cyber threat and vulnerability management program by helping identify, analyze, respond to, and monitor threats, events, and vulnerabilities. - We collaborate across functions to achieve security objectives and support implementation plans for security projects. - We provide technical guidance and training on security risks and prevention strategies. - We create security content for monthly site security metrics reporting based on global standards. - We assist with Secure Lifecycle Process cybersecurity assessments and threat modeling to support compliance and identify vulnerabilities across the software development lifecycle.
Company:
We are Abbott, a global healthcare leader focused on helping people live more fully at every stage of life. Our portfolio spans diagnostics, medical devices, nutritionals, and branded generic medicines, and we serve communities in more than 160 countries. This Cybersecurity Specialist role can be performed remotely within the U.S. At Abbott, we offer meaningful work, career growth, international development opportunities, education support, retirement savings with strong employer contributions, and health and wellness benefits. We are recognized globally as a great place to work and are committed to diversity, inclusion, and equal opportunity.
